Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
File:                     DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft (raw, json)
Hash identifier:          EWdXTcggQDrRMaF0nTDzeUfosHJI09kTKrvYeVvkTII=
Subject key identifier:   43:12:9A:20:D6:D7:49:82:83:39:C7:E9:64:E2:B4:3B:97:1F:16:F4
Authority key identifier: 0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
Certificate issuer:       /CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Certificate serial:       018F467C21C0667FC4B0631CAA73CA7A5005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
Manifest number:          0E31
Signing time:             Sun 05 May 2024 02:01:31 +0000
Manifest this update:     Sun 05 May 2024 02:01:31 +0000
Manifest next update:     Mon 06 May 2024 02:01:31 +0000
Files and hashes:         1: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl (hash: DN7NZxRze2ysk7ylE7yTsoJjbSGEsL9KVgvPxKaVXhQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:7c:21:c0:66:7f:c4:b0:63:1c:aa:73:ca:7a:50:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
        Validity
            Not Before: May  5 02:01:31 2024 GMT
            Not After : May  6 02:01:31 2024 GMT
        Subject: CN=43129a20d6d749828339c7e964e2b43b971f16f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:32:b5:b8:7e:6b:30:e0:e0:45:d9:0a:6a:d6:
                    27:fb:b7:a8:7a:f9:be:1b:8b:2e:69:d2:62:a9:53:
                    1e:e0:91:93:9f:e3:8f:84:11:41:fa:d2:f5:20:b8:
                    09:79:09:72:85:2d:30:45:4e:5d:0d:c4:a2:27:5d:
                    87:22:42:5f:7c:01:d0:d1:b4:ff:4d:6e:88:9b:9e:
                    4b:f0:01:cb:09:55:b2:ca:4e:0c:30:15:aa:17:8a:
                    09:1f:e5:ee:6f:cc:77:27:3a:03:ac:bf:86:d5:9c:
                    5b:69:8f:b7:a3:be:c7:1d:a2:e2:f1:7a:52:93:2b:
                    73:16:8b:d9:2e:83:57:5b:58:4a:10:81:f9:2c:34:
                    1c:d6:91:a2:91:88:e8:04:eb:f9:ca:2c:16:fa:2c:
                    e4:25:5e:90:6a:1b:97:df:3c:da:07:7d:e7:71:86:
                    dd:a2:0b:84:08:8d:4b:70:d5:e2:0c:71:4d:80:a5:
                    1e:a4:e9:ba:4e:0e:73:6e:58:f7:55:29:09:0e:d0:
                    2c:a2:53:b8:88:6e:e7:e4:e8:30:ad:fd:91:83:94:
                    17:4b:14:af:8f:12:2f:a8:18:5e:81:b7:2e:31:08:
                    c2:9a:e6:73:f5:55:b1:22:18:9d:bf:42:94:e7:d2:
                    95:be:e7:d0:6c:e9:b0:33:27:10:cf:ca:b4:a2:c8:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:12:9A:20:D6:D7:49:82:83:39:C7:E9:64:E2:B4:3B:97:1F:16:F4
            X509v3 Authority Key Identifier:
                keyid:0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:d8:de:85:3d:c8:dd:fd:60:e2:8d:e0:59:77:5f:b5:cc:5c:
         b8:eb:3e:1a:17:94:ca:9a:bf:f7:d5:30:bf:7b:78:37:2a:a5:
         1e:6c:7b:12:61:01:a3:39:d8:6d:c8:f4:c2:ab:28:31:75:a5:
         4e:a1:c5:4b:c5:a7:ab:b4:a9:c7:af:5a:4b:27:be:7f:ca:29:
         a5:36:ac:25:36:aa:5e:b7:12:9c:13:7c:5e:f3:64:3d:ea:74:
         4b:9a:05:5c:3e:02:59:d0:c2:01:e3:90:bc:60:a2:35:9d:53:
         d0:e9:b1:ed:ee:e1:8e:5a:cf:3f:c2:d2:ed:c7:da:38:9b:20:
         32:0b:da:fb:2c:36:ad:e2:3e:23:53:fd:44:2a:11:0d:3e:46:
         83:42:88:de:00:af:8f:22:69:5d:6e:a2:bc:88:97:72:62:7a:
         32:34:46:4b:49:85:ee:00:4a:c8:bd:f3:83:6f:38:c9:6d:33:
         82:19:6f:1a:33:90:27:c8:d7:26:78:b4:3a:db:fb:fb:de:e2:
         dd:37:39:05:09:6f:bc:f5:c5:45:57:a1:ed:82:1e:7a:f0:3e:
         df:29:59:93:81:1f:07:31:8f:aa:d5:60:d6:32:8d:ac:bf:0c:
         4f:0f:de:aa:85:ba:e0:64:ed:9f:99:5a:85:08:94:24:60:66:
         3c:06:fd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:11:39 2024 by rpki-client on console-ams.rpki-client.org